Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
File: DWisydbqg0IUE-TPWgc3-sMXNSo.mft (raw, json)
Hash identifier: HDCjnrqGVUEzR/LCu4ypzbxTy4mrMqvv9/W4nAEJfWM=
Subject key identifier: A3:9D:5A:D6:EA:56:75:2F:98:0B:6D:4C:21:12:37:25:DA:E0:CC:89
Authority key identifier: 0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A
Certificate issuer: /CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
Certificate serial: 019A72CA53B7E824C798FAFA9A4070703688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
Manifest number: 0451
Signing time: Tue 11 Nov 2025 12:00:53 +0000
Manifest this update: Tue 11 Nov 2025 12:00:53 +0000
Manifest next update: Wed 12 Nov 2025 12:00:53 +0000
Files and hashes: 1: DWisydbqg0IUE-TPWgc3-sMXNSo.crl (hash: xTQQ9rh2/lVw6O3+VOQ0Pr5a38JGRQXofzFTe9SQ3sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:53:b7:e8:24:c7:98:fa:fa:9a:40:70:70:36:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
Validity
Not Before: Nov 11 12:00:53 2025 GMT
Not After : Nov 12 12:00:53 2025 GMT
Subject: CN=a39d5ad6ea56752f980b6d4c21123725dae0cc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bb:49:7d:5b:e5:24:07:07:e4:4b:55:2e:e6:
b0:c8:d0:c8:26:41:23:15:15:d8:e8:00:29:2f:ca:
d3:0a:66:bd:8c:bf:24:33:0f:f0:de:48:9c:b8:ed:
67:2a:28:37:ba:1a:ff:12:c7:6e:55:63:80:4b:11:
54:d6:83:1b:12:60:e7:b6:3e:26:ce:95:72:97:71:
a1:7c:b1:33:d8:d1:8e:69:6f:61:ce:4d:16:cf:26:
4b:aa:42:03:f1:37:93:37:ba:79:01:8a:88:dc:7d:
b3:00:04:74:4a:cb:9e:74:a7:c3:4a:e0:7f:88:24:
98:75:04:3c:bd:79:5a:3d:72:e9:6f:24:bb:32:e5:
c4:38:0d:6c:be:fa:6f:d4:08:91:ac:cd:91:6a:d2:
3f:dd:a3:23:dc:19:cd:97:6d:ab:7b:5e:be:76:21:
be:5e:5b:70:ca:f4:b3:f7:e9:3a:8c:97:62:7d:72:
f4:f2:83:a3:5b:6e:7b:e0:8e:2f:17:af:71:74:3b:
57:af:aa:a0:0c:59:dc:69:6d:2c:a2:92:4b:8b:25:
4a:6b:19:00:d5:10:b3:5d:1c:59:6d:3e:f5:20:2b:
d7:b4:90:bb:a7:ed:2b:8b:b2:2f:71:8d:3e:9f:b1:
cc:a8:3c:5b:c0:41:70:c9:6a:6d:f5:66:89:f7:8a:
e7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9D:5A:D6:EA:56:75:2F:98:0B:6D:4C:21:12:37:25:DA:E0:CC:89
X509v3 Authority Key Identifier:
keyid:0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:cf:61:61:7b:15:3c:a1:aa:92:4b:2c:71:65:88:7e:40:14:
d1:ef:02:0d:2f:a8:57:40:98:24:4e:1a:e7:5c:74:3e:d9:70:
74:99:f1:d7:f6:a9:cd:d9:b8:b4:66:1c:a6:e3:58:43:c4:55:
44:ec:a5:74:d5:8c:02:3c:37:a4:81:be:d3:fb:70:75:55:0a:
79:4c:bd:cb:a7:c2:ad:2f:0e:76:b4:75:fd:54:74:03:13:96:
72:3e:66:e1:b9:87:4d:fd:ae:11:3f:ae:1e:65:06:96:94:bb:
ec:b5:ae:d7:1c:13:9d:58:7b:02:aa:4b:c8:17:ab:20:04:88:
7e:36:8f:2e:5a:da:9a:8e:84:a2:c1:ce:be:a6:50:bb:b2:d6:
b0:23:af:fd:b6:cc:6b:11:72:9e:07:00:e5:4b:62:e8:21:c2:
a4:89:76:d3:53:83:c6:25:03:9c:e9:82:c9:44:1d:a9:a6:8d:
4f:35:1f:8c:fd:62:a6:d9:c8:06:56:94:ef:6f:bb:2e:9d:36:
7d:ba:eb:94:17:f6:6c:cc:8a:e7:54:ee:c8:49:ce:0c:3b:2d:
14:41:2f:ae:3e:0f:53:be:f4:05:3a:f5:10:a6:72:91:a2:31:
ef:fd:81:4c:fe:d9:51:c5:da:e9:54:fd:3e:4b:9c:36:22:23:
dc:9c:fc:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyylO36CTHmPr6mkBwcDaIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNjhhY2M5ZDZlYTgzNDIxNDEzZTRjZjVhMDczN2ZhYzMx
NzM1MmEwHhcNMjUxMTExMTIwMDUzWhcNMjUxMTEyMTIwMDUzWjAzMTEwLwYDVQQD
EyhhMzlkNWFkNmVhNTY3NTJmOTgwYjZkNGMyMTEyMzcyNWRhZTBjYzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rtJfVvlJAcH5EtVLuawyNDIJkEj
FRXY6AApL8rTCma9jL8kMw/w3kicuO1nKig3uhr/EsduVWOASxFU1oMbEmDntj4m
zpVyl3GhfLEz2NGOaW9hzk0WzyZLqkID8TeTN7p5AYqI3H2zAAR0SsuedKfDSuB/
iCSYdQQ8vXlaPXLpbyS7MuXEOA1svvpv1AiRrM2RatI/3aMj3BnNl22re16+diG+
XltwyvSz9+k6jJdifXL08oOjW2574I4vF69xdDtXr6qgDFncaW0sopJLiyVKaxkA
1RCzXRxZbT71ICvXtJC7p+0ri7IvcY0+n7HMqDxbwEFwyWpt9WaJ94rnqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOdWtbqVnUvmAttTCESNyXa4MyJMB8GA1UdIwQY
MBaAFA1orMnW6oNCFBPkz1oHN/rDFzUqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFdpc3lkYnFnMElVRS1UUFdnYzMtc01YTlNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83OWU2MWQtOWFmYi00ZDU1LTk0YTQt
NGU0YTUwNjU1OTRhLzEvRFdpc3lkYnFnMElVRS1UUFdnYzMtc01YTlNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS83OWU2MWQtOWFmYi00ZDU1LTk0YTQtNGU0YTUwNjU1OTRh
LzEvRFdpc3lkYnFnMElVRS1UUFdnYzMtc01YTlNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARc9hYXsV
PKGqkksscWWIfkAU0e8CDS+oV0CYJE4a51x0PtlwdJnx1/apzdm4tGYcpuNYQ8RV
ROyldNWMAjw3pIG+0/twdVUKeUy9y6fCrS8OdrR1/VR0AxOWcj5m4bmHTf2uET+u
HmUGlpS77LWu1xwTnVh7AqpLyBerIASIfjaPLlramo6EosHOvqZQu7LWsCOv/bbM
axFyngcA5Uti6CHCpIl201ODxiUDnOmCyUQdqaaNTzUfjP1iptnIBlaU72+7Lp02
fbrrlBf2bMyK51TuyEnODDstFEEvrj4PU770BTr1EKZykaIx7/2BTP7ZUcXa6VT9
PkucNiIj3Jz8AA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:09 2025 by rpki-client